Might be worth checking here as well that a user from a different tenant can only see public items.